Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-2516.
PoCs published by Metasploit, including Metasploit module exploits/windows/browser/keyhelp_launchtripane_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-2516, a vulnerability in the KeyHelp ActiveX control (keyhelp.ocx) that allows remote code execution via the LaunchTriPane method. It abuses ShellExecute to write arbitrary files and achieve RCE on Windows systems before Vista by uploading a payload and a MOF file.
Description
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."
Exploits (2)
This Metasploit module exploits CVE-2012-2516, a vulnerability in the KeyHelp ActiveX control (keyhelp.ocx) that allows remote code execution via the LaunchTriPane method. It abuses ShellExecute to write arbitrary files and achieve RCE on Windows systems before Vista by uploading a payload and a MOF file.
This Metasploit module exploits a vulnerability in the KeyHelp ActiveX control (keyhelp.ocx) by abusing the 'LaunchTriPane' function to execute arbitrary commands via ShellExecute. It leverages the '-decompile' option in 'hh.exe' to write arbitrary files, achieving remote code execution on Windows systems before Vista.